no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP3
!
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
 server 172.33.28.12  auth-port 1645 acct-port 1646
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
!
dot11 syslog
dot11 vlan-name pushvl vlan 33
dot11 vlan-name kancelarievl vlan 31
dot11 vlan-name navstevavl vlan 32
!
dot11 ssid Navsteva
   vlan 32
   authentication open 
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 7515400
!
dot11 ssid Push
   vlan 33
   authentication open 
   authentication key-management wpa version 2
   wpa-psk ascii 7 3085E0812
!
dot11 ssid Vyroba
   vlan 34
   authentication open 
   authentication key-management wpa version 2
   wpa-psk ascii 7 E081E0154
!
dot11 ssid Kancelarie
   vlan 31
   authentication open eap eap_methods1 
   authentication network-eap eap_methods1 
   authentication key-management wpa version 2
   mbssid guest-mode
!
dot11 network-map
!
!
username administrator privilege 15 secret 5 $1$cfd9$65Zlk86KMlrWToiu677G3E6/
username michal privilege 15 secret 5 $1$AANp$u6RT.F/hywHOmVTVeib0e/
!
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 1 mode ciphers aes-ccm 
 !
 encryption vlan 33 mode ciphers aes-ccm 
 !
 encryption vlan 32 mode ciphers aes-ccm 
 !
 encryption vlan 31 mode ciphers aes-ccm 
 !
 ssid Navsteva
 !
 ssid Push
 !
 ssid Kancelarie
 !
 antenna gain 0
 mbssid
 speed  basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
 channel 2447
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1
 no ip route-cache
 bridge-group 254
 bridge-group 254 block-unknown-source
 no bridge-group 254 source-learning
 no bridge-group 254 unicast-flooding
 bridge-group 254 spanning-disabled
!
interface Dot11Radio0.31
 encapsulation dot1Q 31 native
 no ip route-cache
 bridge-group 31
 bridge-group 31 subscriber-loop-control
 bridge-group 31 block-unknown-source
 no bridge-group 31 source-learning
 no bridge-group 31 unicast-flooding
 bridge-group 31 spanning-disabled
 !
 interface Dot11Radio0.40
 encapsulation dot1Q 40 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.33
 encapsulation dot1Q 33
 no ip route-cache
 bridge-group 33
 bridge-group 33 subscriber-loop-control
 bridge-group 33 block-unknown-source
 no bridge-group 33 source-learning
 no bridge-group 33 unicast-flooding
 bridge-group 33 spanning-disabled
!
interface Dot11Radio0.32
 encapsulation dot1Q 32
 no ip route-cache
 bridge-group 32
 bridge-group 32 subscriber-loop-control
 bridge-group 32 block-unknown-source
 no bridge-group 32 source-learning
 no bridge-group 32 unicast-flooding
 bridge-group 32 spanning-disabled
!
interface GigabitEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 no keepalive
!
interface GigabitEthernet0.1
 encapsulation dot1Q 1
 no ip route-cache
 bridge-group 254
 no bridge-group 254 source-learning
 bridge-group 254 spanning-disabled
!
interface GigabitEthernet0.31
 encapsulation dot1Q 31 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.33
 encapsulation dot1Q 33
 no ip route-cache
 bridge-group 33
 no bridge-group 33 source-learning
 bridge-group 33 spanning-disabled
!
interface GigabitEthernet0.32
 encapsulation dot1Q 32
 no ip route-cache
 bridge-group 32
 no bridge-group 32 source-learning
 bridge-group 32 spanning-disabled
!
interface BVI1
 ip address 172.30.44.53 255.255.255.0
 no ip route-cache
!
ip default-gateway 172.30.44.1
ip http server
ip http authentication aaa
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
radius-server attribute 32 include-in-access-req format %h
radius-server host 172.33.28.12  auth-port 1645 acct-port 1646 key 7 123AB546CD
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
line vty 0 4

!
end
